Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20313336373837.roa
File: 3139332e392e33332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iTamC7zyiZtiZVMl5HzrIS9WQhlQC4nHPSq7vJxFsoE=
Subject key identifier: 69:E3:2B:CD:87:79:71:31:AD:5A:CF:67:7D:59:40:CC:CE:08:E1:25
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 340B2462508247F23B36D056C137A95726D325EE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 27 Dec 2024 19:44:39 +0000
ROA not before: Fri 27 Dec 2024 19:39:39 +0000
ROA not after: Fri 26 Dec 2025 19:44:39 +0000
asID: 136787
IP address blocks: 193.9.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0b:24:62:50:82:47:f2:3b:36:d0:56:c1:37:a9:57:26:d3:25:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Dec 27 19:39:39 2024 GMT
Not After : Dec 26 19:44:39 2025 GMT
Subject: CN=69E32BCD87797131AD5ACF677D5940CCCE08E125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:5d:25:ce:73:56:31:be:60:d9:a6:02:f2:
1d:a0:af:94:93:b7:91:15:72:3c:a9:85:3b:46:0f:
6b:bb:56:e4:b3:0f:21:23:de:75:cb:59:4c:c3:7e:
1e:77:b2:1f:5c:cf:d0:7c:63:17:49:74:7f:52:67:
d2:57:05:60:6b:24:41:18:83:68:2c:de:84:80:db:
b5:85:b1:7c:41:8d:aa:10:6e:2a:0c:31:91:b9:84:
23:bd:ba:42:cc:fb:1f:a7:83:bc:c7:ae:07:10:42:
55:6b:6c:d3:26:07:de:08:54:77:f4:ae:5d:61:5d:
ef:90:cc:b3:0e:21:e8:73:24:f6:b7:9c:da:3c:6f:
3a:0c:de:7c:f8:62:21:9c:7c:2f:57:78:e9:28:7e:
68:bd:93:30:83:19:06:fd:2a:20:9c:98:31:59:a7:
5c:75:be:69:e2:d4:84:ec:43:06:ff:79:97:01:99:
d7:e5:d5:fd:84:03:50:52:e5:04:e2:40:f7:fe:df:
55:3a:d0:9d:92:8d:e8:9c:29:e0:de:6c:57:26:99:
3f:bb:6c:2b:f2:22:db:70:c0:86:25:86:55:87:ff:
cc:9c:7f:ce:36:ec:a1:d8:2c:10:a5:84:23:12:08:
04:02:ec:0e:ef:f6:5c:6f:bc:92:2e:88:b9:b6:ec:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:2B:CD:87:79:71:31:AD:5A:CF:67:7D:59:40:CC:CE:08:E1:25
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e392e33332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b6:52:f2:7e:e5:d3:92:d5:0b:8e:9d:b9:d4:74:c8:f9:a5:
d9:4e:6c:a4:4e:6f:ef:19:0a:84:26:b4:ee:24:45:5b:b3:5f:
f9:2b:c1:cf:14:c8:80:5d:29:21:7e:6b:47:6d:14:54:11:f0:
f4:fa:06:29:35:2c:96:76:e6:5a:9e:41:1c:ae:0b:34:3a:e7:
df:df:d4:f7:dc:ac:fe:6f:22:56:5e:d4:9a:1e:50:28:dc:56:
bc:cb:15:6e:e6:dc:5d:0e:04:2f:55:ec:a4:23:36:bb:87:72:
e9:26:2a:68:cf:66:f3:61:8e:3c:b3:4e:0e:fa:0a:42:d1:43:
a0:96:51:0e:dc:59:65:6d:dd:bf:eb:39:ef:e3:f7:c4:a0:a6:
d4:8f:06:87:f3:d3:b3:68:dc:12:de:c0:13:76:f0:de:1d:8b:
6b:f8:2d:da:43:35:4c:52:ec:8a:cc:f2:fc:74:d2:60:27:43:
6a:f6:32:c9:fd:b0:4f:66:e5:a2:df:93:cb:64:e2:b5:10:15:
42:c0:87:5e:76:e6:ba:9e:ba:a7:80:97:6b:e8:a8:1e:d7:e2:
80:c9:92:e1:43:23:1e:b8:04:4d:72:c2:3c:05:52:9e:00:d6:
c7:b8:8f:3e:5c:e6:5a:18:9b:7e:64:37:6a:fa:5e:96:d9:b8:
62:ec:e9:08
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUNAskYlCCR/I7NtBWwTepVybTJe4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0
ZWE3Nzc5YzAeFw0yNDEyMjcxOTM5MzlaFw0yNTEyMjYxOTQ0MzlaMDMxMTAvBgNV
BAMTKDY5RTMyQkNEODc3OTcxMzFBRDVBQ0Y2NzdENTk0MENDQ0UwOEUxMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGF0lznNWMb5g2aYC8h2gr5ST
t5EVcjyphTtGD2u7VuSzDyEj3nXLWUzDfh53sh9cz9B8YxdJdH9SZ9JXBWBrJEEY
g2gs3oSA27WFsXxBjaoQbioMMZG5hCO9ukLM+x+ng7zHrgcQQlVrbNMmB94IVHf0
rl1hXe+QzLMOIehzJPa3nNo8bzoM3nz4YiGcfC9XeOkofmi9kzCDGQb9KiCcmDFZ
p1x1vmni1ITsQwb/eZcBmdfl1f2EA1BS5QTiQPf+31U60J2SjeicKeDebFcmmT+7
bCvyIttwwIYlhlWH/8ycf8427KHYLBClhCMSCAQC7A7v9lxvvJIuiLm27AoNAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUaeMrzYd5cTGtWs9nfVlAzM4I4SUwHwYDVR0j
BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2
bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzOTMzMmUzOTJlMzMzMzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMEJ
ITANBgkqhkiG9w0BAQsFAAOCAQEAD7ZS8n7l05LVC46dudR0yPml2U5spE5v7xkK
hCa07iRFW7Nf+SvBzxTIgF0pIX5rR20UVBHw9PoGKTUslnbmWp5BHK4LNDrn39/U
99ys/m8iVl7Umh5QKNxWvMsVbubcXQ4EL1XspCM2u4dy6SYqaM9m82GOPLNODvoK
QtFDoJZRDtxZZW3dv+s57+P3xKCm1I8Gh/PTs2jcEt7AE3bw3h2La/gt2kM1TFLs
iszy/HTSYCdDavYyyf2wT2blot+Ty2TitRAVQsCHXnbmup66p4CXa+ioHtfigMmS
4UMjHrgETXLCPAVSngDWx7iPPlzmWhibfmQ3avpeltm4YuzpCA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:23:44 2025 by rpki-client